Congress takes testimony on AI model extraction

On 16 April 2026 a US House committee took written testimony at a hearing titled “China’s Illicit Campaign to Steal and Subvert American AI.” The framing mattered more than any single claim made in the room. Until that point, disputes about one laboratory training on another laboratory’s model outputs had been handled as contract questions, a matter of terms of service, resolved or ignored between companies. The hearing moved the argument into the language of national competitiveness.

What was actually at issue

The technique under discussion is knowledge distillation: training a smaller or cheaper model on the outputs of a larger one, so that the student inherits capability the teacher acquired at enormous cost. Distillation is a standard, published, entirely legitimate method when applied to a model you own. The contested case is narrower, querying somebody else’s commercial model at scale and using the responses as training data for a competing system.

The testimony treated that narrower case as a route by which frontier capability could move across borders without any chips, weights or source code moving at all. That is the structural problem: export controls are designed around physical and digital artefacts, and a distillation pipeline transfers none of them. It transfers behaviour.

Why it changed the conversation

Three things followed from putting the issue on a congressional record. First, it created a forum in which private allegations could be repeated with legislative attention attached. Second, it established distillation as a category that policymakers would be expected to have a position on. Third, it set up the sequence of events that ran through the rest of 2026, a formal industry complaint in June, and White House and Treasury statements in July.

What remained unresolved

The hearing did not settle the underlying legal question, and nothing since has. Model outputs are not clearly protected by copyright. A claim against a distiller therefore tends to rest on breach of contract or on fraudulent account creation rather than on theft of intellectual property, and those are considerably narrower hooks than the rhetoric around them suggests.